Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
File: OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json)
Hash identifier: v/hmCp63XY+MKvWM8Xx5oESR30Dvs9xWi0zEZTHiB2Q=
Subject key identifier: 09:5D:B0:5D:78:C8:8D:03:7B:98:E1:8E:E9:7C:86:1F:85:16:4A:91
Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
Certificate issuer: /CN=384cddcd74d04229583d2c2beed073e0096ba335
Certificate serial: 0199FBEB9120301CC9E8D9950F5090575865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
Manifest number: 0734
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: yCCTGlVN1Bkkf1xvTfl7srMxADjj4PAfhCbFPRilfMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:91:20:30:1c:c9:e8:d9:95:0f:50:90:57:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=095db05d78c88d037b98e18ee97c861f85164a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ae:c8:88:da:68:13:df:73:61:64:cc:47:f3:
27:a1:b9:f9:f4:8e:04:b3:a7:c7:b3:52:37:14:15:
fd:cb:90:d1:29:90:22:8f:36:17:90:3c:ed:ed:b2:
80:48:8d:b0:3d:71:46:6f:6f:66:3f:e7:89:4e:91:
94:54:0a:e6:6f:83:53:0b:27:e8:7a:d0:71:ca:9a:
14:6c:fc:9b:07:62:64:2d:00:b7:2f:23:63:d0:5c:
1e:4f:5e:00:5d:d2:78:f1:41:0d:3c:b5:fc:9a:66:
d9:15:f3:fa:b2:93:da:d7:e2:29:91:c5:b0:00:f3:
45:37:8c:81:67:38:f2:4c:1e:ec:f0:72:db:84:dd:
f2:a7:b7:53:14:ac:e5:b8:89:0d:59:3e:02:ec:b9:
af:12:1d:bc:7c:9f:ad:2d:29:ba:3d:b5:ef:35:0e:
c9:a5:5a:63:23:dc:01:c4:30:f7:06:73:4c:ae:26:
f6:69:ff:3f:79:66:59:bc:ef:4f:e7:f7:91:71:04:
c0:2f:1b:5f:7b:ab:47:e8:af:e3:96:6a:32:98:a3:
34:56:f0:b2:a4:02:46:66:70:b1:92:52:2b:17:8e:
48:d3:46:72:02:1c:cf:c7:76:00:80:68:ee:a4:6f:
6b:99:4b:c9:80:23:d2:bc:1d:cd:f6:83:f2:87:0a:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5D:B0:5D:78:C8:8D:03:7B:98:E1:8E:E9:7C:86:1F:85:16:4A:91
X509v3 Authority Key Identifier:
keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:c2:a5:9d:74:5a:98:e2:de:61:e7:23:e0:56:19:d3:af:
22:58:34:0f:01:d9:43:9f:3d:f1:e3:4c:73:73:23:11:ab:9c:
77:65:fe:3d:c6:97:94:be:6f:8a:c8:4f:73:69:25:c2:9e:93:
39:f4:04:dd:fc:f7:9a:ad:f3:ff:d2:0b:fc:91:a5:ca:d4:61:
1e:15:f2:9b:8e:78:a0:59:18:15:f2:29:ef:38:c8:9e:59:c9:
2a:54:0b:17:de:0d:b9:eb:e1:c4:7f:c0:83:87:b5:38:04:b1:
c1:0e:3b:cc:ef:3b:a6:a3:7f:1a:ac:b7:00:f9:ec:8c:b0:29:
2a:43:4b:d2:5d:b1:bb:f0:36:48:36:6d:7f:60:a2:8c:78:9b:
2e:fa:89:cb:03:98:b9:a3:a6:c1:30:05:6b:ad:6c:d5:1b:60:
62:3d:fe:5a:c7:5b:12:e4:33:67:3d:ae:2e:ad:a1:a1:2f:0f:
58:a4:63:0b:de:51:b4:66:40:1b:86:8b:86:f2:0d:bc:3f:b6:
c7:b0:ac:1e:86:c8:50:9f:bc:02:09:8f:de:c2:cb:9e:c8:30:
56:dd:fa:21:9a:db:37:4b:de:09:fb:aa:c3:63:29:9b:8a:67:
dd:f9:9c:84:0b:53:ea:3a:39:78:65:a9:b8:e0:c9:f8:ff:f2:
96:ec:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:52 2025 by rpki-client